Skip to content
OpenAdvisories

Archive

12 October 2011

Vulnerabilities first published on this day (UTC), newest first.

50 results · Feed

  • Unscored —

    CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —
    CVE-2011-1247 EPSS 11%

    Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3…

  • High 7.1
    CVE-2011-1985 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2011-1998 EPSS 21%

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2011-1996 Public exploit EPSS 59%

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Updat…

  • Unscored —
    CVE-2011-1993 EPSS 18%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-1995 EPSS 29%

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to ex…

  • Unscored —
    CVE-2011-1997 EPSS 14%

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2011-1999 Public exploit EPSS 27%

    Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute ar…

  • Unscored —
    CVE-2011-1895 EPSS 11%

    CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1…

  • Unscored —
    CVE-2011-1969 EPSS 17%

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.ja…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Updat…

  • Unscored —
    CVE-2011-1253 EPSS 13%

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly…

  • Unscored —

    Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote attackers to bypass intended…